Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: NnAX5pPh9cmysCxYqeyOl2OVUoOE5QE2rRsj5VXJAoY=
Subject key identifier: 3B:B3:52:5E:AE:F3:6F:66:0D:AE:89:F4:50:37:5C:C0:2D:46:C3:5E
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019D296092498F74527D091ACBF3CAF91301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0B68
Signing time: Thu 26 Mar 2026 09:01:27 +0000
Manifest this update: Thu 26 Mar 2026 09:01:27 +0000
Manifest next update: Fri 27 Mar 2026 09:01:27 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: 2dqzsEe5YpvQbOmooAARQuFX7XKVM9rwe62q6U6bWMM=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:92:49:8f:74:52:7d:09:1a:cb:f3:ca:f9:13:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Mar 26 09:01:27 2026 GMT
Not After : Mar 27 09:01:27 2026 GMT
Subject: CN=3bb3525eaef36f660dae89f450375cc02d46c35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f8:fe:9e:8e:fd:0d:43:c3:f5:9a:78:8f:09:
3a:a9:b3:e3:ec:49:17:e6:bd:2c:95:05:19:0c:ec:
31:c3:61:d2:1a:ae:94:bb:dd:0d:4e:61:35:bf:92:
d1:14:19:23:26:58:44:2b:19:85:99:36:68:cf:6e:
af:aa:e8:fb:e1:39:de:2a:b3:ef:06:ed:ce:32:1e:
ef:dd:3b:88:8b:3e:68:a5:48:52:74:a6:43:82:4f:
95:2e:56:b8:b6:f4:78:fb:25:40:3f:88:d2:97:35:
4a:60:ce:92:a3:69:ea:79:5f:f6:88:b8:74:ae:7c:
6f:5d:d0:2a:8e:6b:ea:15:4a:63:ef:41:c1:56:fc:
0c:76:96:9c:31:38:09:c6:14:f0:71:cf:98:fc:a1:
02:ed:08:dd:78:04:bd:15:18:64:a7:64:1e:89:e3:
d5:ad:e9:2e:1c:db:a9:da:e2:11:bb:a2:75:c6:5c:
f9:c8:5d:ed:53:ca:08:88:a5:1c:b6:24:08:2e:d0:
5a:85:4e:3d:93:0f:ae:2c:3d:ff:73:93:35:04:08:
f2:79:1e:28:07:97:29:5f:9e:a0:ad:9c:60:f5:8a:
f8:5e:c0:59:6a:fc:66:92:ae:0f:d6:f3:12:39:cc:
4d:41:23:5c:10:52:f3:9e:c4:f7:f2:84:37:0a:4d:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:52:5E:AE:F3:6F:66:0D:AE:89:F4:50:37:5C:C0:2D:46:C3:5E
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c8:30:81:e6:63:9f:54:73:f7:5a:e4:32:f7:28:2b:07:68:
b1:38:04:cd:d5:40:47:c5:de:5a:ca:c4:fe:5f:5b:61:3d:c7:
7f:81:78:b7:c0:83:96:5a:90:a8:ec:ef:c6:5f:bf:9c:d3:2c:
ac:a6:e2:16:33:5e:01:89:95:76:4a:fc:a5:b7:84:aa:09:53:
f1:c0:eb:fd:42:e9:f4:41:69:f6:ba:90:d8:1a:ff:c4:ec:f9:
46:82:fd:7e:5e:96:f8:16:7e:73:b9:86:25:a4:2d:09:24:ac:
74:3a:94:da:70:52:d1:91:6f:dc:64:8f:71:41:1d:4e:0e:a5:
77:90:e4:49:6b:ef:e8:90:37:32:44:ba:16:c5:5a:a3:65:b1:
f3:d1:9f:93:a8:0e:23:98:23:4b:85:85:e7:de:9a:a1:d5:ce:
cf:a7:88:73:26:80:44:2e:69:25:31:b3:5a:50:78:7b:e4:fc:
a7:d4:f9:58:3b:08:df:2d:1c:07:30:9f:29:98:c4:bf:9e:11:
c6:c2:e0:3b:da:2d:97:33:1a:64:bc:54:cf:63:34:80:5d:fb:
79:ae:69:5f:ee:08:35:08:17:49:31:09:a8:9c:58:09:b9:bb:
1c:0a:88:de:72:a1:62:bd:1e:ba:af:bb:66:bc:6d:13:04:b4:
21:f2:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:39:46 2026 by rpki-client